Package: release.debian.org Severity: normal User: [email protected] Usertags: unblock
Please unblock package grub2 While testing the Buster d-i RC2 build yesterday, I realised that we hadn't *quite* finished all the packaging changes for Secure Boot. At the moment, only the signed grub packages on amd64 Recommend: shim-signed, but we also want that for i386 and arm64 too, as this Recommend: is what causes shim-signed etc. to be pulled in at installation time. At the point when we first did this signing-template work, we didn't *have* a shim-signed package on the other arches, so it didn't make sense at the time. I've made a tiny 1-line patch to just the signing-template and uploaded. Ansgar says he'll prod the signing queue tonight to make the -signed packages appear then. Here's the trivial debdiff, excluding some noise in .bzrignore and .gitignore files: diff -Nru --exclude '.*ignore' grub2-2.02+dfsg1/debian/changelog grub2-2.02+dfsg1/debian/changelog --- grub2-2.02+dfsg1/debian/changelog 2019-06-14 19:04:01.000000000 +0100 +++ grub2-2.02+dfsg1/debian/changelog 2019-06-25 10:11:12.000000000 +0100 @@ -1,3 +1,13 @@ +grub2 (2.02+dfsg1-20) unstable; urgency=medium + + [ Steve McIntyre ] + * Make all the signed EFI arches have a Recommends: from + grub-efi-ARCH-signed to shim-signed, not just amd64. + Closes: #931038 + * Add myself to Uploaders + + -- Steve McIntyre <[email protected]> Tue, 25 Jun 2019 10:11:12 +0100 + grub2 (2.02+dfsg1-19) unstable; urgency=medium [ Colin Watson ] diff -Nru --exclude '.*ignore' grub2-2.02+dfsg1/debian/control grub2-2.02+dfsg1/debian/control --- grub2-2.02+dfsg1/debian/control 2019-06-14 19:04:01.000000000 +0100 +++ grub2-2.02+dfsg1/debian/control 2019-06-25 10:09:06.000000000 +0100 @@ -2,7 +2,7 @@ Section: admin Priority: optional Maintainer: GRUB Maintainers <[email protected]> -Uploaders: Felix Zielcke <[email protected]>, Jordi Mallach <[email protected]>, Colin Watson <[email protected]>, Ian Campbell <[email protected]> +Uploaders: Felix Zielcke <[email protected]>, Jordi Mallach <[email protected]>, Colin Watson <[email protected]>, Ian Campbell <[email protected]>, Steve McIntyre <[email protected]> Build-Depends: debhelper (>= 10~), patchutils, python, diff -Nru --exclude '.*ignore' grub2-2.02+dfsg1/debian/signing-template/control.in grub2-2.02+dfsg1/debian/signing-template/control.in --- grub2-2.02+dfsg1/debian/signing-template/control.in 2019-06-14 19:04:01.000000000 +0100 +++ grub2-2.02+dfsg1/debian/signing-template/control.in 2019-06-25 10:08:26.000000000 +0100 @@ -12,7 +12,7 @@ Package: @pkg_signed@ Architecture: @arch@ Depends: grub-common (= @version_binary@) -Recommends: shim-signed [amd64] +Recommends: shim-signed Built-Using: grub2 (= @version_binary@) Description: GRand Unified Bootloader, version 2 (@arch@ UEFI signed by Debian) GRUB is a portable, powerful bootloader. This version of GRUB is based on a unblock grub2/2.02+dfsg1-20 unblock grub-efi-amd64-signed/1+2.02+dfsg1+20 unblock grub-efi-arm64-signed/1+2.02+dfsg1+20 unblock grub-efi-ia32-signed/1+2.02+dfsg1+20 -- System Information: Debian Release: 10.0 APT prefers testing APT policy: (500, 'testing'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-5-amd64 (SMP w/4 CPU cores) Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8) Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled
